{"document":{"category":"csaf_vex","csaf_version":"2.1","notes":[{"category":"summary","text":"Palo Alto Networks PSIRT provided VEX document. This document is autogenerated.","title":"WildFire Cross-Site Scripting Vulnerability"}],"publisher":{"category":"vendor","name":"Palo Alto Networks","namespace":"https://security.paloaltonetworks.com"},"title":"Palo Alto Networks PSIRT provided VEX document: PAN-SA-2016-0018","distribution":{"text":"Copyright © 2024 Palo Alto Networks. All rights reserved.","tlp":{"label":"CLEAR","url":"https://www.first.org/tlp/"}},"tracking":{"current_release_date":"2026-08-03T05:37:06.674Z","generator":{"date":"2026-08-03T05:37:06.674Z","engine":{"name":"Vulnogram","version":"0.0.9"}},"id":"PAN-SA-2016-0018","initial_release_date":"2016-08-12T22:00:00.000Z","revision_history":[{"number":"1","date":"2026-08-02T22:37:06.000Z","summary":"Initial release"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"name":"Palo Alto Networks","category":"vendor","branches":[{"name":"WildFire Cloud","category":"product_name","branches":[{"category":"product_version","name":"WildFire Cloud All","product":{"name":"Palo Alto Networks WildFire Cloud","product_id":"PANW-WildFire-Cloud-1"}}]}]}]},"vulnerabilities":[{"cve":"PAN-SA-2016-0018","product_status":{"known_not_affected":["PANW-WildFire-Cloud-1"]},"notes":[{"category":"description","text":"A Palo Alto Networks firewall displaying a WildFire cloud integrated report is susceptible to a cross-site scripting condition (Ref # WTC-3355).\nA sample analyzed by the WildFire cloud could trigger a cross-site scripting attack against a firewall administrator who is displaying a WildFire report. This vulnerability is restricted to the context in which the report is parsed by the cloud.\nThis issue affects Palo Alto Networks hosted WildFire cloud from January to August 9th 2016"}],"references":[{"category":"external","summary":"NVD - PAN-SA-2016-0018","url":"https://nvd.nist.gov/vuln/detail/PAN-SA-2016-0018"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2016-0018","url":"https://security.paloaltonetworks.com/PAN-SA-2016-0018"}],"threats":[{"category":"impact","description":"A Palo Alto Networks firewall displaying a WildFire cloud integrated report is susceptible to a cross-site scripting condition (Ref # WTC-3355).\nA sample analyzed by the WildFire cloud could trigger a cross-site scripting attack against a firewall administrator who is displaying a WildFire report. This vulnerability is restricted to the context in which the report is parsed by the cloud.\nThis issue affects Palo Alto Networks hosted WildFire cloud from January to August 9th 2016"}],"scores":[{"cvss_v3":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseSeverity":"MEDIUM","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"},"products":[]}]}]}